CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
76.9%
Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpath_show parameter in a GoAhead action. NOTE: this issue only crosses privilege boundaries when security settings such as disable_functions and safe_mode are active, since exploitation requires uploading of executable code to a home directory.
Vendor | Product | Version | CPE |
---|---|---|---|
cpanel | cpanel | * | cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:* |
netenberg | fantastico_de_luxe | * | cpe:2.3:a:netenberg:fantastico_de_luxe:*:*:*:*:*:*:*:* |
www.netenberg.com/forum/index.php?topic=6832
www.securityfocus.com/archive/1/497964/100/0/threaded
www.securityfocus.com/archive/1/498519
www.securityfocus.com/archive/1/498526
www.securityfocus.com/archive/1/498529
www.securityfocus.com/archive/1/498529/100/0/threaded
www.securityfocus.com/bid/32016
exchange.xforce.ibmcloud.com/vulnerabilities/46252
www.exploit-db.com/exploits/6897